Network Security

HiWe have a new install thats still in learning mode.  I have an alert on the DC for one of the sensors saying that s1p1 - s1p4 has no link.We have an active/standby ASA pair behind the sensor. and 2 nexus's in front.  One nexus connects to s1p1 and ...

Hello everybody, As far as I know there is no Deep Inspection engine for MSSQL in Cisco ASA, so here arise a question. How to inspect MSSQL traffic in Cisco ASA or better to say how to inspect a custom service or port , where there is no Deep Inspect...

Hello, I'm seeting up a brand new, out of the box 5516x, i've followed every step of the configuration guide, configured the module in the same subnet and VLAN as the inside, but when loading asdm, which seems to take forever, it shows the firepower ...

Hello,we have the problem, that a few server OSs are not correctly identified.Some of them are ESX hosts, some are appliances like CUCM.Is there any best practice or recommendation of solving this? I know I could start NMAP, fingerprint the server or...

  We have received following penetration vulnerability for Cisco ASA Firewall 5500 (S/N: JM164940Q0) Vulnerabilities Risk/Severity Recommendation by vendor for closure of vulnerabilities Multiple issues related to SSL certificates were identified on ...

Hi, I have the following  configuration , but it does not working , logging enableno snmp-server locationno snmp-server contact snmp-server host INSIDE 192.168.2.1 trap community passwordd snmp-server enable traps syslog logging history notifications...

Hi All I have a server on our internal network that has very limited access from the internet. Therefore it has an external address that is NAT'd at our firewall. However I want to arrange to access the server from our LAN also using its external add...

Hi, Currently I have a private line owned by SP and I setup a Backup line which is VPN tunnel. I'm using CIsco ASA 5512 on both sites I would like to ask the ff. 1.By default is Voip traffic permit or deny  by our firewall? 2. For Voice traffic do i ...

Hi,How to enable software bypass on clustered firepower 8350 devices.Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.I  see Access Control rule with Tr...

Hi, Need to know the explanation of  NAT access-list policy extended permit ip host 192.168.60.207 host 192.203.187.140 nat (Outside) 1 access-list policy Above is zero nat zero that says if source is 192.168.60.207 and going to destination 192.203.1...

I ping a device with in the Firepower console, but cant escape from the reply sequence. Does anyone know the key combination to quit from the ping request? Thank you.

Hi I have some issue on Cisco ASA firewpoer licensing. Cisco tell us like that " The Cisco ASA with FirePOWER Services base configuration includes the AVC function by default. This feature provides application identification and control of more than ...

I am trying to add ASA5508 to the firesight but failing. show netstat displays established session with DNS server. But with powersight, it is SYN_SENT My powersight is in the inside interface. show int ip br indicates the management 1/1 is in down/d...